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^ (57) Abstract: Methods of and devices (Dl) for authorizing an operation requested by a first user (P2) on a content item (CI) in 
w accordance with a user right (URl). The user right may identify the first user or a second user (PI) and authorizes the user in question 
^ to perform the requested operation on the content item. If the user right identifies the second user, the operation is authorized upon 
receipt of information linking a user right of the first user and the user right of the second user. Preferably the information comprises 
Q one or more domain certificates (DCl, DC2) identifying the first and second users as members of the same autiiorized domain (AD). 
^ Preferably a content right (CRl) enabling the operation is used, whereby the user right authorizes the second user to employ the 
1^ content right 
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